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An|ffl4m»Bty to the Spcffifijc^ffion 
Please leplaoe the paragrsph on Page 5, lines 1-13 with flie following matked-up teplacem^t 
paragrapli: 

- Commonly-^signed and oo-pendtog U. S. Patent application 09/790,104 (filed on Feb. 
21 , 2Q01 : now U. S. Patent 7>000.8341 , titled •"Method To Address Security And Privacy Issues 
of the Use of RFID Systems to Track Consumer Products" (attorney docket 

RSW9200001 78US1, hereinafter rcfenred to as "the fiist related invention** and hereby 
incoEpotated herein by reference) discloses ovawriting an RFID tag*s memozy with new data* 
such as a i^ortened verdon of the product's serial numb^» at a point of sale to signify that the 
tagged item lias been paid for. This patent appUcation also discloses ibnnatting the data naen^ 
on an RFID tag with control bit&, thereby providing a type field to dictate access control such as 
whether a field can be overwritten. According to prefmed embodiznents of Ihis first related 
invention, bgic invoked when an update of the data memory is requested checks the associated 
control field, and if updating is not allowed, the logic exits rattier than performing the i^date. 
Using the disclosed techniques^ an unscrupulous store atnployee can be prevented £nom 
reprogramming the RFID tag of an expensive item with data representiog an ine^qp^ive item in 
order to p^ a lower price for the expensive item. — 

Please replace file paragr£Q)h that begins on Page 12, line 13 and carries over to Page 13,line6 
with the following mariced-up replacement paragraph: 

- PrejBaredanbodiments write fiw ownership data, secure 

techniques^ onto a non-volatile memoiy on the RFID tag of a product using a read/write RFID 
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tiBnsponder, although tzaditioiial indelible marking techniques such as engraving, bar codes^ 2- 
dimeosional or matrix codes could also be used advantageously for wtiting fhis secured 
o^ership data. Alternative embodiments vmte the secured ownership data on existing products 
ttiat already contain data memories and input/output c^abilities, such as computers and 
petiphetals, pervasive computing devices, consumer electronics^ and £Q)pliances. (Commonly- 
assigned and co-pending U. S. Patent , entitled **M6thods, Systems and Computer 

Program Products for Secure HimwareUpdatcs^ and S. Pa te n t - , uiti Hcd^l^ 

6>976J63.jBntltled ^'Methods, Systems and Computer Progiam Products for Rule Based 
Firmvvare Updates Utilizing Certificate Extensions and Certificates for Use Therein*'^ disclose 
techniques for creating a secure memory within the flash memory of confuting devices^ 
consumer electronics, and appliances. The teachings in these commonly-assigned mvetitions, 
which were filed on July 12, 2000 and have serial numbers 09/614*982 and 09/614»983, 
respectively^ may be levm^d by alternative embodiments which write owt^rship data into 
prodticts containing data memory.) — 

Please replace the patag?raph on Page 13, lines 9-13 with the following marked-iq[> replacement 
paragraph: 

- Each party in the chain of ownership for a product has incentives to keep accurate 
records concerning that party's acquisition and disposition of the product. Some of these 
incrativcs arise because of the possibility of a product liability [[suit]] lawsuit . A consumer 
would like to be able to prove everyone who has previously owned tlie product, for example, and 
anyone who once owned the product would like to be able to prove that ownership was 
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traDsfeired, to whom, and when. 

Please i^lace the paragr^h on Pagp 1 5, lines 8*19 with the following mariced-up replacement 
pazagraph: 

- Fig-3Aflliisti»tesafiistsamplcfomiMforanowne^ 

stored on a product (where this format is best suited to a device without severe space 
constraints). As shown thetehi^ an optional product-stiecific description 310 (such as the 
manufacturer's model number) may be recorded (preferably as the first entiy) in the product's 
ownmhip transit record. Some number of GUIDs 320 are pres^ to the record, eadi 
conesponding to a previous transfer^ thereby providing a history of product transfers- In 
prefen^ emlxKiimerits, the first such GUID 321 selves as a pr 
uniquely identifies the product Using a GUID (such as the product serial numb^, or 
ahematively one of the tcansacdcm-^specific GUtDs illustrated at reference numbers 322 - [[326]] 
32S and 33 1 ) as an uidex for ownership transfer records wxdnn the audit registry thereby 
uniquely identifies the product associated with each such record. (The serial number 321 is 
pi«ferab1y created when the ownership nansfer record 300 is initialized, as exemplified by &e 
logic in Fig$« 6 and 7, which are described below.) ~ 

Please t^lace Hie paragr^h that begins on Page 18, line 19 and carries over to Page 19, Ime 1 1 
with the following marked-vqp replacemrat paragr^h: 

- In an embodiment v*iere the product-integral ownership information is recorded 
indelibly using bar codes., matrix code&, indelible ink or other physical markings (radier than an 
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RFID chip or simiJar technology^ the owneiship infbnnatiott preferably comprises an engraved 
or embossed tcpxesentation of the digjtalty-signedGU^ Eachoivtiership 
transfer, includijQg the transfer to the cinrmt o\vner» therel^y remains permanently on the product 
as a prodwt^ntegial ownership tiansfer log. In this embodiment, a format of the type shown in 
Fig* 3C (where the on-product infonnadon omits details of the transaction^ such as the seller and 
buyer IDs) wiU include, for each previously-recorded QVXD [[213]] 321 - 325, the digital 
signatEire that was computed when that OUID was initidly (QT a format of 

the type presented in Fig. 3D is used^ whete transactioQ-specific details are written to the product, 
then each record 320a» 320b in fbe product history will also include the digital signature 
originally computed for that transaction.) — 

Please replace the paragraph on Page 21, lines 6 - 17 with ihe following marked-up replacement 

A second sample format 390 for audit records is ilhistratedm Thisformat 
reptesents a scenario wtiere the audit registrar records all information provided for the transaction 
(as discussed below with referoice to Blocte 410 - 420 of Fig. 4 and Block SOO of Fig. 5), and 
conesponds to titie on-pcoduct ownership record format 370 in Fig. 3D« In this approach, the 
audit registrar copies all of the infonnation provided by the product, ewept for the previous 
digital signature, into a new audit record 390. (bi the example in Fig« 3F, tibe copied fields are 
depicted at 310, 320a, and 320b.) The index to the new audit record is a newly-computed OUn>, 
illustrated at lefcrenoe number 39L Notably, this QUID is preferably repeated in field 395 (see 
reference number 396), in which details of this cucrent transaction are reootdcsd, such that the 
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newly-computed digital signsituxe 340 (coving all fields in audit registry record t[391]l 32fi 
except the record key at 39 1) is ideirtical to tbc digital signature in the nevrfy-stoied on-product 
record having record fonnat 370, - 

Please leplace the paragiaph that begins on Page 22, line 20 and cairies over to Page 23, line 6 
with the following maxked-up replacement pazagrs^h: 

- Referring now to Fig. 5, the regishar receives the owners^ 
transaction details [[G]that are transmitted bom the product according to Fig. 4» and in preferred 
embodiments^ the ciedentials of tte person purporting to be the current owner ate also provided 
to the registrar (Block 609: 500^. Credentials may be presented in a number of different ways, 
such as a user JD and password ccmibination^ or biometric information of the user (such as a 
fingeiprintX etc. A trusted agent may present the credentials securely, including a programmatic 
process using secured network transmission. - 

Please f^lace ihe paragraph on Page 24^ lines 3-13 with the following marked-up replacement 
pdragraph: 

» The operations of Blocks 540 - 580 begin wiA the regtstrar generating a new GUID for 
the new tmnsactton that is to be legisteied (Block 540). At Block 550, a new ownership record is 
created by the registrar in preferred embodiments, using data fiom the previous (on'*product) 
ownership record plus data pertaining to the petiding transfer. The ownership history portion of 
the new ownership record preferably includes all previously-existing ownership history data (e.g.» 
field 320 in Fig. 3 A) fields from the ownership transfer record and the pertinent sub-fields from 
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the last-transaction informatioiL For example, ivith reference to ownershtp record fonnat 300 in 
Pig, 3 A, only sub-field 331 from field 300 is used (along with field 320) when constnictiiig the 
new version of ownership Wstoty field 320. When using format 370 in Fig* 3D, on Ihe other 
han4 the entire contents of last transaction field 330 are used when constructing the new history 
field n320J]22QL - 

Please replace the par^raph that begins on 29, line 19 and catties over to Page 31, line 6 
with the following marked^vQ> replacement paragr^h: 

— Note that some control over the details of an ownership 
some cases, be imposed by legal restrictions on die ne^stiar that registers transfers and/or on a 
r^istrar (or other entity) that subsequently accesses the re^stered information during an audit 
These restrictions may arise in various wsq^s, such as through the contractual arrangement 
between the selling party and the chosen registrar^ and may require additional protections such as 
en<3y|^on of ifae transaction data deposited in the audit record. For exan^le, the unit price of a 
transfer xxxBy be an extremely sensitive piece of information to the seller, or a driver's license 
number or similar identifying information used for authentication of the buyer might be quite 
sensitive from the buyer's perspective^ Preferably, the novel techniques disclosed m several 
commonly-assigned and ooi)endixig related U. S. Patent applications are leveraged to provide 
diis type of control Hiese related applications (filed on 10/21/1 999X "^ch are referred to 
herein as selective XML encryption patent a|^lications'' and are hereby incorporated herein 
by reference, comprise the following: •^Selective Data Encryption Using Style Sheet Processing'' 
(attorney docket RSW91 9990073US1, serial number 09/422,43 0: nowU, S, Patent 6.931,532^ : 
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"Selective Data Encfyption Using Style Sheet Pitjcessing For Deciyption By A Client Proxy** 
(attx)mey docket P W^^'^Q^^ iottci ^^ni mn^h^ noM^7^^^7; n^wIL S. Patent 6-96L849>. 
''Selective Data Enciyption Using Style Sheet Ptocessing for Decryption by a Gro^p Clerk" 
(attorney docket RSW91999011 lUSl, serial number 09/421.4 92: now U. S. Paten t 6-9783671: 
and "Selective Data Enocyption Using Style Sheet Plrocessing For Deciyption By A Key 
Recovery Agentf (attorney docket RSW919990113USU serial number 09/422,43 1; now..U,.Sa 
i>atpntfi, Q4l,4^^ . Techniques dlscfoscd m the sclectlve XML etkciy^ 

enable restricting access to portions of a document to one or mote "commimities'' through use of 
comniimity-specific enciyption (where a ''community" is a collection of authorized viewers of 
information^ including humans as well as i»x»granimatic entities or processes). The selective 
XML patent applicadons also disclose techniques for enabling akey recoveiy agent 1o decrypt 
portions of a docrnneot on bdialf of a commimhy member that is properly authenticated to tte 
key recoveiy agent Embodiments of the present invention preferably leverage techniques 
disclosed in these related ai^ltcations to represent ttansacti<»i data in a way that restricts access 
to contained field data to selective sets of viewers, and also to enable decryption by a key 
i^coveiy agent (which could be used, for example, to allow access by governmental agencies 
under leg3.Uy-requiied situations). - 

Please replace the paiagra|>h that begins on Page 31, Ime 9 and carries overto Page 32, line4 
with the following marked-up replacement paragraph: 

Fig. 8 iilustrales bow^ for the special case of a merchant Vfbo re^tatands a generic 
product, the first ownership transfer transaction ttet forms part of ownership transfer record 
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(such as format 300 in Fig. 3A) can be used to xepresent the tnic origin of the generic item. This 
allo^ IzaceabUity bade to the or^jXiial mamifectuier^ as is desirable {inter alia) in a product- 
liability situation. The sub-fields withm the last transaction field 330 are piefeiably used to 
initially record this information, and thus record 800 of Fig. 8 shows how the content of those 
sub-fields of fotwiat 3O0 is altered for this re-branding transfier situation. In particular, the QUID 
83 1 is denoted an •'original GUID^' that corresponds to this transfer; the seller ID sub-field 832 is 
used to specify an identifiCT of the original manu&cturer; the hxxyer ID sub-field 833 specifies an 
identifier idurtifying of the merchant receiving the product for xe-branding; the [[data]] ^t^d 
time 834 represfflt this transfer; and Ihe price sub-field 835 specifics the original price paid by 
the re-branding merchant Note that this infiwmation vdll also be stored « 
within the transaction history field when using a record format as exentpHfied at reference 
nmnbcr 370 in Fig. 3D, and regardless of the fbcmat of ownership transit records, the format of 
the mfijrmation for the re-branding transfer is preferably identical to the format used for all other 
transfer transactions. — 

Please replace the paragraph on Page 32, lines 5-18 with the following marked-up replacement 
paragF^h: 

— Figs- 9 and 10 depict how a transfer of ownership via a network-connected scanning 
device can readily be carried out, fet example in a manufacturing, vliolesale, or retail situation. 
As shown therein, a product 900 passes by the scanning device 910, such that the product*s 
owiietsMp transfer data fiom its RFID chip is presoited to the scanni^ A 
transaction generator component 920 leveraged by the scanning device graerates a new GUID 
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and new values of the sub-fields of the last transactiott field to teflect this transaction (Block 
1010), along with a digital signature, prefeiably in the manner which has been described above. 
Data registering the transaction is written to a log 930 (Block 1040), and tbe revised product 
owneiship transfer data is provided to an KFID npdatcr component 940 (Block 1 020) which 
records that information in the read/write RFID chip of product 900 (Block 1030)* The RFCD 
updater component 940 is shown outside of the RFID chip 900 for drafting convenience; as will 
be obvious, the iqvdater component 940 is part of the conqxinentry on the diip of product 900. 
(Notethatthewritingof information to a log^ also referred to heidn as an ^ may 
occOTConcurtendy withthcietuniitigof inibrmatiOT — 

Please replace the paragraph that begins on Page 34, line 14 and carries over to Page 35, line 1 1 
with the following marked-iv replacement paragjaph: 

As an alternative to m-person presentation of aproduct to a transfer agent» ifae transfer 
agent fimction may be provided by a web service by proxy. For example, an online web site 
speciaHzing in barter acKi auction transactions (such as the well-known eBay® online auction 
service) or a financial services provider (such as the well-known PayPal(g> online payment 
service) might be a logical place for providmg this type of tra^^ ("cBa^and 
"PayPal" are registered trademarks of eBay Inc. and P^Pal, Inc., respectively.) When Msing a 
proxy^ proof of identity is pieferably provided to the online proxy using conventiortal means. 
This is ilhistrated in Fig. 12. As can be seen by inspecdon, operations used in Fig. 12 are similar 
to those of Fig. 11, except flbatflieowri^aishiptransf^ag^ 1210), and 

the seller is then authenticated to this agent (Block 1220), Prrferably, the proxy then validates 
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tbe existing o^eiship data using its digital signature (Block 1230) to mcrease its assurance that 
the ownershiptccoxded reocflcd whidi has been provided fiom the product (at Block 1 200) is 
legitimate. If this validation succeeds^ the operations of Blocks 1240 - 1290, which are 
analogous to Blocks 1 120 - 1 170 of Fig, U, are earned out. Oflietwise, error handling (not 
shown in Fig. 12) is prefcmbly performed, ^ich may include notifying an online service 
provider that one of its users attempfaod a potenlially-ftaudulent transfer and/or notifying 
authorities ofa potentially-stolen product - 

Please replace the pans^raph that begins on Page 40, line 7 and carries over to Page 41 » line 4 
with the following marked-up replacement paragraph: 

-- A set of commonly-owned and co-pending U. Patent applications provides several 
techniques to detect shopti^g at a store exit, using a combination of RFID tags on merchandise, 
data written to RFID t^s at the point of sale, and otibier identifiers. See the U. S. Patent 
Applications titled RFID to Detect and/or Prevent Theft and Shoplifting^ (attorney docket 
RSW920030126US1, serial number 10/665^8 2: nowU, S. Patent 7.005^88 V TJsing Radio 
Frequem^ Identification with Customer Loyalty Cards to Detect and/or Prevent Theft and 
Shoplifting'^ (attorney docket RSW920030194USU serial number 10/666,483), '^sing Radio 
Frequency Identification with Transaction-Specific Correlator Valu^ Written on Transaction 
Receipts to Detect and/or Prevent Theft and Shoplifting'' (attorney docket RSW920030195US 1, 
serial number 10/666,703)> "Using Radio Frequency Identification with Transaction-Specific 
Correlator Values to Detect and/or Prevent Theft and Shoplifting'' (attorney docket 
RSW920030196US1, serial number 10/666,287), and "Using Radio Frequency Identification 
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with Transaction Receipts to Detect and/or Prevent Theft and Shoplifting'^ (attorney docket 
RSW920030197US1, serial number 10/666,700), fo some embodiments, techniques disclosed in 
these patent applications write data, which may be a correlator containing a transaction ID, 
date/timestamp» sequence numb^, customer number, etc., to an RFID tag on merchandise at Ifae 
point of sale. This is quite distinct j&om the present invention, which writes a non-repudiable 
ownership transfer log directly onto the merchandise using a variety of techniques which include, 
but are not limited to, RFID. — 

Please xeplaoe the paragraph on Page 41, lines 5-11 with the followix^ marked-up replacement 
paragraph; 

— A comnKmly«^9ig]Q.ed and co-pending U. S. Patent Application titled '^Electronic 
Receipt Management (attorney docket RSW920030124US1, filed Sept 16, 2003, serial^immber 
10 / ) i -eptaccg number 1 0/663,5091 replaces a traditional paper receipt with an electronic 
receipt that is loaded into the purchaser's pervasive computing device^ makii^ it easier for a 
consumer to find the relevant receipt This patent application, however, does not teach recording 
ownership trans^fers in RFID tags as diseased herein, nor does it teach other techniques of the 
present invention such as creation of anditable tndls of ownership transfers. -- 

Please replace the paragraph that begins on Page 41, line 12 and carries 0^ I 
with the following marked-up replacement paragraph: 

- Commonly-assigned, co-prading U. S. Patent Application 09/847,889 (attorney dodcet 
RSW920010017US1, filed 05/03/2001), titled "Identification and Tracking of Persons Using 
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RFID-T^ed Items**, discloses techniques for using RFTD techtiology to identify or characterize 
people, based on the RFID tag$ pt^sent in items being carried by that person at a point in time* 
Commonly-assigned^ oo-pending U. S. Patent Application 10/612^51 (attorney docket 
RSW920030099USU filed 07/02/2003 : now U. S. Patent 6.99Z5741 , titled ^'Object Matching via 
RFID**, discloses techniques far using RFID technology to track and match olgects, when the 
RFID tags of these objects have bem progEammed with data suitable for indicating that the items 
aie in association vvitfa one another. Neither of these patent applications teach r^stering product 
oivnership transactions or recoiding such infonnation in an RFID tag. — 
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